angler-fishThe Vulnerability History Project

Fixed #20936 -- When logging out/ending a session, don't create a new, empty session.

      Previously, when logging out, the existing session was overwritten by a
new sessionid instead of deleting the session altogether.

This behavior added overhead by creating a new session record in
whichever backend was in use: db, cache, etc.

This extra session is unnecessary at the time since no session data is
meant to be preserved when explicitly logging out.
    
commit 393c0e24223c701edeb8ce7dc9d0f852f0c081ad
+1 -8
+1 -1
+21 -28
-21
+1 -2
+4 -9
expand_less